Export data? #41

added ajax security

Author: contactashish13

classes/Visualizer/Module/Chart.php

@@ -606,6 +606,8 @@ public function cloneChart() {
 	 * @access public
 	 */
 	public function exportData() {
+        check_ajax_referer(Visualizer_Plugin::ACTION_EXPORT_DATA . Visualizer_Plugin::VERSION, "security");
+
 		$chart_id = $success = false;
 		$capable = current_user_can( 'edit_posts' );
 		if ( $capable ) {

classes/Visualizer/Render/Page/Data.php

@@ -114,6 +114,7 @@ protected function _renderSidebarContent() {
                     $export_link = add_query_arg( array(
                         'action' => Visualizer_Plugin::ACTION_EXPORT_DATA,
                         'chart'  => $this->chart->ID,
+                        'security' => wp_create_nonce(Visualizer_Plugin::ACTION_EXPORT_DATA . Visualizer_Plugin::VERSION),
                     ), admin_url( 'admin-ajax.php' ) );
 ?>
                     <input type="button" class="button" id="export-data" value="<?php esc_attr_e( 'Export Data', Visualizer_Plugin::NAME );?>" data-url="<?php echo $export_link;?>">